# Staff Security GRC Analyst at Suno

- Company: Suno
- What the company does: Create stunning original music for free in seconds using our AI generator. Make your own masterpieces, share with friends, and discover music from artists worldwide. Backed by Lightspeed, IVP and Menlo.
- Company website: https://suno.com/
- Type: Startups (AI role)
- Level: Senior
- Location: NYC
- Work setup: On-site
- Pay: $277K to $364K base salary per year (USD)
- Posted: 2026-10-08
- Apply by: 2026-11-23
- Apply: https://jobs.ashbyhq.com/suno/56970f07-68a2-4880-80e9-bdf7e1d42ba0?utm_source=1752vc&utm_medium=careers
- Page: https://www.1752.vc/careers/jobs/suno-staff-security-gfc-analyst/

## About the role

We're looking for a Staff Security GRC Analyst to build Suno's security compliance program from the ground up. You'll report to our CISO, work alongside our AppSec and InfraSec teams, and own the control framework that ties everything together: which controls we have, how they map to SOC 2 and NIST CSF, and whether they actually work. You're as comfortable reading a cloud config as an audit standard, and you'd rather automate evidence collection with AI than chase screenshots. Found on 1752vc Careers, the job board for startup and VC roles.

## What they're looking for

- 7–9 years in GRC, security compliance, or IT audit
- Hands-on, end-to-end ownership of a security compliance program as its primary owner, ideally including taking a company through its first SOC 2
- Deep working knowledge of SOC 2 and NIST CSF, including control mapping, audit mechanics (design vs. operating effectiveness, sampling, evidence), and staying current as requirements evolve
- Enough technical fluency to read a cloud configuration, access setup, or pipeline and judge whether it enforces what the control says. You don't need to write production code
- Comfort building your own automation with scripts or AI tools

Tags: Engineering

Source: 1752vc Careers, https://www.1752.vc/careers/jobs/suno-staff-security-gfc-analyst/